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i:n.the.claims 

Amended claims follow: 

1. (Currently Amended) A computer program product embodied on a tangible 
computer-readable medium for controlling a computer to scan computer files for 
malware, said computer program product comprising: 

malware scanning code operable to malware scan all computer files stored within 
a storage location, as addressed by an operating system to identify any computer files 
stored within said storage location that contain malware; 

identification code operable if no computer files containing malware are found in 
said storage location, to identify said storage location as a clean storage location; and 

when subsequently reading a computer file, determination code operable to 
determine whether or not said computer file is stored within a clean storage location and: 

if said computer file is stored within a clean storage location, then permitting 
reading of said computer file without further malware scanning; and 

if said computer file is not stored within a clean storage location, then malware 
scanning said computer file; 

wherein said malware scanning of all computer files stored within a storage 
location is performed as a background task that occurs as a function of when an 
associated computer system is at l e a s t s ub stantially i dle; 

wherein sai d malware scanning of all computer files stored within a storage 
location as a background task is performed with more thorough- scanning options selected 
than for on -access scanning applied to computer files not stored within clean storage 
locations and being accessed by a user; 

wherein said malware scanning code uses malware definition. data. to. identify 
malware. .and^..^ 
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hasbeen.mai ire » mm I us n g said updated.matere definition data and no computer 
tiles c .maini iig n ihvat an found in said storag location 
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2. (Original) A computer program product as claimed in claim 1 , wherein said 
malware scanning of all computer files stored within a storage location is performed upon 
a set of user specified storage locations from within all storage locations accessible to a 
user. 

3. (Cancelled) 

4. (Cancelled) 

5. (Original) A computer program product as claimed in claim I, wherein a 
computer file is malware scanned before being written to a clean storage location. 

6. (Cancelled) 

7. (Currently Amended) A computer program product as claimed in claim [[6]]I, 
wherein, when said storage area is being malware scanned with said updated malware 
definition data, computer fi les written to said storage location after said storage location 
was previously identified as a clean storage location are malware scanned before 
computer tiles that are unaltered since said storage location was previously identified as a 
clean storage location, 

8. (Original) A computer program product as claimed in claim 1 , wherein said 
malware is one or more of a computer virus, a worm, a Trojan, a banned computer file, a 
banned word and a banned image. 

9. (Currently Amended) A method of scanning computer files for malware, said 
method comprising!! the steps of]']: 

malware scanning all computer files stored within a storage location as addressed 
by an operating system to identify any computer files stored within said storage location 
that contain malware; 
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if no computer files containing maivvare are found in said storage location, then 
identify in s i e location as a clean storage location; and 

when subsequently reading a computer file, determining whether or not said 
computer file is stored within a clean storage location, whereupon; 

if said computer Hie is stored within a clean storage location, then permitting 
reading of said computer file without further malware scanning; and 

if said computer file is not stored within a clean storage location, then malware 
scanning said computer file; 

wherein said [[step of jjmalware scanning all computer files stored within a 
storage location is performed as a background task that occurs as a function of when an 
associated computer system is. at least in part,-s«ksttHrtta&ridle; 

wherein said [[step of jjmalware scanning all computer files stored within a 
storage location as a background task is performed with more thorough scanning options 
selected than for on-access scanning applied to computer files not stored within clean 
storage locations and being accessed by a usei^ 

lereijisa i . i ! ire .scairningu ijwan efinit rdata e it' ■ lal v 
and., upon updating of said maivvare definition data to give updated maivvare definition 
data, said storage location is no longer identified as a clean storage area until it. has been 
malware scanned using said updated 1 1 1 on data and no computer files 

containing malware are found in said storage location . 

10. (Currently Amended) A method as claimed in claim 9, wherein [[said step of 
Jjmalware scanning all computer files stored within a storage location is performed upon 
a set of user specified storage locations from within ail storage locations accessible to a 
user. 

11. (Cancelled) 

12. (Cancelled) 



- 5 - 



1 3 . (Original) A method as claimed in claim 9, wherein a computer tile is malware 
scanned before being written to a clean storage location. 

14. (Cancelled) 

1 5. (Currently Amended) A method as claimed in claim [[14]]9, wherein, when said 
storage area is being malware scanned with said updated malware definition data, 
computer files written to said storage location after said storage location was previously 
identified as a clean storage location are malware scanned before computer files that are 
unaltered since said storage location was previously identified as a clean storage location. 

1 6 (Original ) A method as claimed in claim 9, wherein said malware is one or more 
of a computer virus, a worm, a Trojan, a banned computer file, a banned word and a 
banned image. 

17. (Currently Amended) kpp ti 

for scanning computer files for malware, said apparatus comprising; 

malware scanning logic operable to malware scan all computer files stored within 
a storage location as addressed by an operating system to identify any computer files 
stored within said storage location that contain malware; 

identification logic operable if no computer files containing malware are found in 
said storage location, to identify said storage location as a clean storage location; and 

when subsequently reading a computer file, determination logic operable to 
determine whether or not said computer file is stored within a clean storage location and: 

if said computer file is stored within a clean storage location, then permitting 
reading of said computer file without further malware scanning; and 

if said computer file is not stored within a clean storage location, then malware 
scfiiiniiig said computer file; 

wherein said malware scanning of all computer files stored within a storage 
location is performed as a background task that occurs as a function of when an 
associated computer system is at - l e ast - #«bst - a^ i al 4 y -- i dle; 
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wherehi said raalware scanning of all computer files stored within a storage 
location as a background task is performed with more thorough -scanning options selected 
than for on-access scanning applied to computer flies not stored within clean storage 
locations and being accessed by a user; 

v her i uyj _ s n ing >gic u ^_ t ilware efj > j ojj ntifi 

malware and, upon updating of said malware definition data to give updated malware 
iej iiij sail >toi o tic isj [on e id ,l v is a ea ag are untiLij 
has been malware scanned using said updated malware definition data and no computer 

il i ' i t mdij i i > M i l 

18. (Previously Presented) Apparatus as claimed in claim 1 7, wherein said malware 
scanning of all computer files stored within a storage location is performed upon a set of 
user specified storage locations from within all storage locations accessible to a user. 

19. (Cancelled) 

20. (Cancelled) 

21 . (Previously Presented) Apparatus as claimed in claim 1 7, wherein a computer file 
is malware scanned before being written to a clean storage location. 

22. (Cancelled) 

23. (Currently Amended) Apparatus as claimed in claim [[22]]j7, wherein, when said 
storage area is being malware scanned with said updated malware definition data, 
compute! files written to said storage location after said storage location was previously 
identified as a clean storage location are malware scanned before computer files that are 
unaltered since said storage location was previously identified as a clean storage location. 

24. (Original) Apparatus as claimed in claim 17, wherein said malware is one or more 
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of a computer virus, a worm, a Trojan, a banned computer file, a banned word and a 
banned image. 

25. (Previously Presented) A computer program product as claimed in claim 1 , 
wherein, if said computer file is stored within said clean storage location., then said 
computer file is permitted to be read without further time spent on mal ware-related 
processing. 

26. (Currently Amended) A computer program product as claimed in claim [[6]]1, 
wherein said maiware scanning using said updated malware definition data is performed 
as another background task. 

27. (Currently Amended) A computer program product as claimed in claim 1 
embodied on a tangible computer readable medium for controlling a computer to scan 
computer files for malware. said computer program product comprising: 

malware scanning code opera ssj 'feci within 

a storage location as addressed by an operating system to identify any computer files 
stored within said storage location that contain malware: 

identification code oper able if no computer files containin g malware are found in 
said storage location, to identify said storage location as a clean storage location: and 

when subsequently reading a compute; 'L i> nun ■ >n codi operable to 
determine whether or not said computer file is stored within a clean storage location and: 

id i is red wi i a ..clean ..stora n j t n 

read ing of said computer file without further malware scanning; and 

if said computei fih if not it red within a clean storage location, then malware 
scanning said computer tile; 

wherein. said . malware scannin 

eati i peribrme 1 _ 1 that ot i ( i hen 

associated computer system is, at least in part, idle: 

wherein said malware scanning of ail computer tiles stored within a storage 
location as a background task is pi 'cd than tot 



-8- 

c,i i \p_p\u >< . 1 t 5 < k i , ' t torag tions_aoc 
being accessed by a user: 

wherein a!) of said computer files stored within sa < 1 dd\ essed by 

said operating system share a common logical storage location as viewed by said 
operating system such that said logical storage location includes computer files sharing 
si mi 1 ar characte ci sties. 

28. (Currently Amended) A computer program product as claimed in claim 1 , 
wherein the background task avoids interference with a responsiveness of the associated 
computer system when the user starts to use the computer system. 



